Elevated Risk
IP 143.198.238.87 is a high-risk address associated with sustained hacking activity, catalogued with a threat level of 8 out of 10 and a confidence score of 85 percent based on 7,453 reported incidents between September 2025 and June 2026. This DigitalOcean-hosted IP address (ASN 14061, United States) demonstrates an activity frequency rated 8 out of 10, indicating continuous rather than sporadic malicious engagement.
Detection data from 20 automated honeypot sensors confirms consistent intrusion-oriented behaviour spanning approximately nine months of active reporting. The sheer volume of abuse reports places IP 143.198.238.87 among the most reported addresses for hacking-category threats in the monitored period. The AS14061 network assignment to DigitalOcean indicates this activity originates from a cloud infrastructure provider commonly leveraged by threat actors for its flexibility and reputation for allowing diverse customer activity.
Hacking activity in this context encompasses automated exploitation attempts, vulnerability scanning, and unauthorized access probes against exposed services. The high report count and persistent activity frequency suggest this IP participates in broad-scale scanning campaigns or credential brute-forcing operations rather than targeted attacks. Exposed services such as SSH, RDP, web interfaces, or databases without adequate hardening face the highest risk of compromise through repeated automated assault.
Defensive measures should include implementing strict firewall rules to limit exposure of sensitive services to untrusted networks, deploying automated abuse-management tools such as fail2ban to dynamically block repeated connection attempts, enforcing strong authentication policies including key-based authentication where applicable, and maintaining comprehensive logging for correlation during incident response. Regular patch management and network monitoring remain essential to identify and neutralise exploitation attempts originating from sources like IP 143.198.238.87 before they achieve unauthorized access.